DWSurvey 跨站脚本漏洞

DWSurvey is a questionnaire system written in Java. A security vulnerability exists in DWSurvey version 1.0. An attacker can exploit the vulnerability to execute arbitrary code via the thequltemld parameter in the qu-multi-fillblank!answers.action file...

CVE-2020-20070: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file...